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All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . [3 This communication is responsive to 9 November 2004 . 

2. E><] The allowed claim(s) is/are 1-9. 11. 12. and 14-19 . 

3. £3 The drawings filed on 30 March 2001 are accepted by the Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or(f). 
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1. □ Certified copies of the priority documents have been received. 
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3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
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Reasons for Allowance 

1. In response to amendment filed on 9 November 2004, the amendment to the claims is 
accepted, however examiner's amendment attached amends claims 1 1 and 14 so that they do not 
depend from cancelled claims, 10 and 13. 

Allowable Subject Matter 

2. The following is an examiner's statement of reasons for allowance: Claims 1-9, 11, 12, 
and 14-19 are allowed, in view of arguments presented in amendment on page 8, lines 10-16, in 
which applicant amended claims so that the private/public key pair is generated and transmitted 
from the client to the Public Key Infrastructure (PKI ) system. As indicated by the applicant the 
reference teach the claimed invention "The "authentication service's public key" disclosed in 
Wood does not correspond the public key recited in claim 1". 
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10. (Canceled) 



1 1. (Original) The computer program recited in claim>0fwherein the digital signature 



12. (Original) The computer program recited in claim 8, wherein verifying the identity and 
validity of the user by PKI system by accessing a directory using the digital signature certificate 
further comprises; 

verifying that the digital signature certificate has not been revoked; and 
verifying that the user is still a member of the organization. 

13. (Canceled) 



14. (Original) The computer program recited in claim>5; further comprising; 

accessing a foreign computer network not associated with the PKI system using the 
public key signed by the domain certificate authority. 

15. (Currently Amended) A method of creating a single sign-on role certificate using a PKI 
system, comprising: 

creating a digital signature certificate verifying the identity of a user and authority of the 
user to obtain the digital signature certificate; 

delivering a password to the user through the mail to the user's home address; 
accessing a PKI system , through a client platform, by the user using the password; 



certificate may be used for both signatures and encryption. 
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